Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NtwnMritGs8T_GhyGrUWIQsJCbY.cer
File: NtwnMritGs8T_GhyGrUWIQsJCbY.cer (raw, json)
Hash identifier: 7QMvv75r9tPHesoXPdaTnJyhtZPyGKjvCsLaJuPLn64=
Subject key identifier: 36:DC:27:32:B8:AD:1A:CF:13:FC:68:72:1A:B5:16:21:0B:09:09:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C87D49BA912E24CBDE7DC625E8386
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/194/36DC2732B8AD1ACF13FC68721AB516210B0909B6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/194
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.161.0/24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 14:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:87:d4:9b:a9:12:e2:4c:bd:e7:dc:62:5e:83:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36dc2732b8ad1acf13fc68721ab516210b0909b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:89:ef:ae:08:df:0d:8f:5c:18:1c:9f:69:
b4:75:7c:29:0d:6c:0a:5f:ff:0b:a8:04:d5:b6:95:
75:43:39:e8:2d:a6:9e:5e:e5:d8:38:8b:05:8b:d7:
54:2a:e0:b9:13:e8:c0:1a:aa:b5:36:e3:18:87:0d:
2b:fa:5b:a9:fe:06:01:c8:b3:d2:28:bf:61:7e:22:
7b:70:af:7d:ac:fd:3d:2e:a1:39:cd:aa:08:4b:33:
8f:f5:88:b8:54:90:86:81:59:11:ab:a8:3f:b6:e0:
b7:2e:35:7e:45:d4:9e:cb:4e:aa:21:ad:61:d0:0a:
1d:70:75:ec:37:8c:bb:f9:fe:9e:2c:20:f2:14:c8:
9a:0c:b7:4b:fe:8a:df:b2:1d:53:64:fd:26:a9:3c:
b7:51:cd:9c:f9:32:a7:79:47:09:6c:20:a3:96:c7:
cb:2d:57:d3:5a:3f:0f:ac:1e:91:e9:96:61:27:9f:
28:7d:17:85:5a:ce:23:df:54:35:45:6f:29:72:d1:
f3:41:5d:e1:42:f3:31:e6:67:15:a9:74:d3:59:52:
60:be:ee:f9:9e:cf:0f:88:90:b0:5f:76:98:6b:9b:
2b:87:e3:56:7d:8e:be:ed:88:44:0d:50:c4:83:df:
8b:76:af:32:04:fa:cf:82:78:4c:64:d5:ad:5a:b4:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:27:32:B8:AD:1A:CF:13:FC:68:72:1A:B5:16:21:0B:09:09:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/194
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/194/36DC2732B8AD1ACF13FC68721AB516210B0909B6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.161.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d9:a7:58:b0:05:cd:52:a5:aa:e2:6c:41:90:25:15:23:1e:
d9:f4:fc:b3:ef:ff:43:52:fd:9c:25:0c:5b:11:54:0f:dd:5f:
ce:2e:d1:11:c7:23:e5:d3:4d:ae:a4:e2:1b:e9:62:fc:88:52:
22:3d:ce:7a:28:48:10:4a:62:44:18:86:d4:0f:6f:2a:a3:8c:
a4:8a:89:c5:c1:69:24:49:89:dd:37:d0:fd:37:84:98:db:89:
be:e9:27:0c:ea:a8:8c:02:35:ca:48:9e:8c:c5:0f:6f:7e:bc:
c7:97:2c:0c:ab:50:ad:63:28:b3:dd:87:80:18:00:77:fa:b9:
e8:d1:21:9f:4a:66:96:61:34:7a:38:40:16:d7:ea:22:d3:01:
3d:63:96:60:01:bc:e6:fb:a3:8d:ab:12:24:9b:1c:9e:62:ad:
f5:12:fa:cc:21:57:d6:0a:52:9a:54:a3:13:df:dd:a9:fc:77:
2c:24:49:60:34:4f:39:b5:f0:0a:18:d1:fb:dc:b1:ae:ec:15:
a7:b9:aa:e4:a8:8c:0a:9e:4a:1c:0c:65:63:5b:21:7d:45:b0:
8b:7d:b8:36:42:7f:92:a1:3b:87:52:f9:38:58:56:5b:9f:1d:
8b:9c:19:7f:3d:73:24:05:7e:f2:65:93:4b:4a:aa:33:93:63:
b8:71:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-fra.rpki-client.org